Memory Corruption Vulnerability in NI Circuit Design Suite by National Instruments
CVE-2025-30419

8.5HIGH

Key Information:

Vendor

Ni

Status
Circuit Design Suite
Vendor
CVE Published:
15 May 2025

What is CVE-2025-30419?

A memory corruption vulnerability exists in NI Circuit Design Suite, stemming from an out of bounds read in the GetSymbolBorderRectSize() function while using the SymbolEditor. This flaw can potentially allow an attacker to disclose sensitive information or execute arbitrary code on an affected system. Successful exploitation necessitates user interaction, as it requires them to open a maliciously crafted .sym file. This vulnerability impacts versions of NI Circuit Design Suite released prior to 14.3.0 and can pose significant risks to users who fail to apply necessary updates.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Circuit Design Suite 0 <= 14.3.0

References

https://www.ni.com/en/support/security/available-critical...

CVSS V4

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Michael Heinzl working with CISA
JSON
.